Analysis
- max time kernel
150s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 04:51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f75bc21d4f082a61b51ae3902b0b4433_akira_glassworm_zxxz.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f75bc21d4f082a61b51ae3902b0b4433_akira_glassworm_zxxz.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target 2026-08-04_f75bc21d4f082a61b51ae3902b0b4433_akira_glassworm_zxxz.exe
- Size 24.5MB
- Sample260804-fgsyvs1gle
- SHA256 82c909d75b717a26548147228c0cf98b538a24a5075f49d2eb7678ad52fb0c43
- MD5 f75bc21d4f082a61b51ae3902b0b4433
- SHA1 51b870c8fff4bb473023198f36cda9f18d206801
- SHA512 62e98fd5382a62c0ea09fb724731c100a5f8843b3e3ea93c6a7dc4065fada39af59d3fecc36624202614dcf7ba45deab4b97feac8d298462cc45e9f18bcae7e5
- SSDEEP 98304:v8XkNwI9WAhxveTQcs+hsPVss9ivQ+Stuid/rdEAc30Btg/MM4QE4w4gYoAUo46i:kXkSSWpLsd/I07g/VUPg+JsMp
- TLSH T12247AF02E9E11979CA97F274859F5221B7343C068235EFA7353CE2741F22B52EB2E758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral2/memory/2072-8-0x0000000000400000-0x00000000017FB000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
- Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 api.gofile.io 5 api.gofile.io